hansott / psr7-cookies

🍪 bakes cookies for PSR-7 messages
https://hansott.github.io
MIT License
40 stars 4 forks source link

Allow none as value for samesite #14

Closed Intrepidity closed 4 years ago

Intrepidity commented 4 years ago

Samesite=none is a valid value, however the validation does not currently allow this.

This blog post highlights when you'd want to use this value: https://web.dev/samesite-cookie-recipes/ Cookies for cross-site usage must specify SameSite=None; Secure to enable inclusion in third party context.

Intrepidity commented 4 years ago

Thanks for the feedback. Good point. I've added a check and a test case :)

hansott commented 4 years ago

Tagged 3.0.1